tacshell is a drop-in replacement for sdshell (used with RSA's ACE/Server) that uses the TACACS+ protocol for authentication.